Project Glasswing found a 27-year-old zero-day in OpenBSD. Autonomously.

The finding problem just got solved. The remediation problem just got harder.

Industry average MTTR for a critical CVE: 60+ days. More CVEs, same infrastructure. Do the math.

https://www.activestate.com/blog/project-glasswing-open-source-remediation-infrastructure/?utm_source=linkedin&utm_medium=organic_social&utm_campaign=fy26_q1_curated-catalog

#ProjectGlasswing #OpenSourceSecurity

Securing the container was never the whole answer. The application dependencies inside it were always the risk.

In 2026, that gap has a name and a price tag.

https://www.linkedin.com/pulse/view-from-trenches-why-software-supply-chain-still-liability-7qrme/

#OpenSourceSecurity #SoftwareSupplyChain #CyberSecurity

5 reasons your open source software strategy is a personal liability in 2026.
AI code volume broke the scan-and-pray model. Here's what's left exposed.

https://medium.com/@ActiveState_ASPM/the-five-horsemen-of-the-ai-code-apocalypse-why-your-current-open-source-software-strategy-is-a-78f5b7efe162

#OpenSourceSecurity #SoftwareSupplyChain #CyberSecurity

Malware Poisons Open Source Tools in Dual Supply Chain Attacks

Imagine trusting a tool, only to have it secretly turned against you - that's what happened in March when two massive supply chain attacks infected popular open source tools with malware, putting tens of thousands of organizations at risk. The full extent of the damage may not be known for months, but one thing is…

https://osintsights.com/malware-poisons-open-source-tools-in-dual-supply-chain-attacks?utm_source=mastodon&utm_medium=social

#SupplyChainAttacks #OpenSourceSecurity #MalwareOperations #EmergingThreats #NationState

AI pulls open source dependencies faster than humans can vet them. The perimeter was never the problem.

The ingredients were.

We broke down where application layer security actually stands in 2026.

https://substack.com/home/post/p-193372464

#OpenSourceSecurity #SoftwareSupplyChain #CyberSecurity